Help with permissions?

Hey everyone,
my problem has to do with setting permissions.

I have created a queue called IT support, and a group called Company
Employees. The Employee group has the following rights on the group: create
ticket and show ticket. These don’t seem to be enough for a user in the
group employees to create a ticket as the queue name doesn’t come up in the
create queue section of the screen or the quick create widget. Am I doing
something wrong there?

George

Hello George,
Try granting at the Global Group level, “SeeQueue” right to Company
Employees, or maybe straight to Privileged group - it may save work for
next queues…
HTH,
Gabriele Franzini
ICT Applications Manager
Nerviano Medical Sciences SRL
PO Box 11 - Viale Pasteur 10
20014 Nerviano Italy

Message: 6Date: Mon, 23 Feb 2009 12:36:41 +0200
From: George Beitis george.beitis@googlemail.com
Subject: [rt-users] Help with permissions?
To: rt-users rt-users@lists.bestpractical.com
Message-ID:
9be19c1c0902230236s461d290ag33ec0d09fbef7857@mail.gmail.com
Content-Type: text/plain; charset=“iso-8859-1”

Hey everyone,
my problem has to do with setting permissions.

I have created a queue called IT support, and a group called Company
Employees. The Employee group has the following rights on the group:
create
ticket and show ticket. These don’t seem to be enough for a user in the
group employees to create a ticket as the queue name doesn’t come up in
the
create queue section of the screen or the quick create widget. Am I
doing
something wrong there?

George
-------------- next part --------------

Hey there,
Thanks for the reply! Unfortunately that doesn’t help as at the end of the
day i want users in the specific group to only have access to their own
tickets and see no other ticket. And if possible to be able to see all
their requested tickets. Does anyone else know how to achieve this?

Thanks
GeorgeOn Mon, Feb 23, 2009 at 1:06 PM, Franzini, Gabriele [Nervianoms] < Gabriele.Franzini@nervianoms.com> wrote:

Hello George,
Try granting at the Global Group level, “SeeQueue” right to Company
Employees, or maybe straight to Privileged group - it may save work for
next queues…
HTH,
Gabriele Franzini
ICT Applications Manager
Nerviano Medical Sciences SRL
PO Box 11 - Viale Pasteur 10
20014 Nerviano Italy


Message: 6
Date: Mon, 23 Feb 2009 12:36:41 +0200
From: George Beitis george.beitis@googlemail.com
Subject: [rt-users] Help with permissions?
To: rt-users rt-users@lists.bestpractical.com
Message-ID:
9be19c1c0902230236s461d290ag33ec0d09fbef7857@mail.gmail.com
Content-Type: text/plain; charset=“iso-8859-1”

Hey everyone,
my problem has to do with setting permissions.

I have created a queue called IT support, and a group called Company
Employees. The Employee group has the following rights on the group:
create
ticket and show ticket. These don’t seem to be enough for a user in the
group employees to create a ticket as the queue name doesn’t come up in
the
create queue section of the screen or the quick create widget. Am I
doing
something wrong there?

George
-------------- next part --------------


http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

Hi George,

I defaulted to granting a global right to the Everyone group to
CreateTicket and ReplyToTicket on the relevant queue (in your case
IT_Support). that should take care of your Company_Employees users
needing to create tickets.

As for the Company_Employees group users being able to only see their
own tickets. i saw a good suggestion on a post which was to do the
following:

  • don’t grant the ShowTicket right to Company_Employees group on the
    IT_Support queue,
    instead;
  • grant the ShowTicket right to the Requestors group on the IT_support queue

that way, they’ll only see their own tickets, even when they do a search.

George Beitis wrote:

Hey there,
Thanks for the reply! Unfortunately that doesn’t help as at the end
of the day i want users in the specific group to only have access to
their own tickets and see no other ticket. And if possible to be able
to see all their requested tickets. Does anyone else know how to
achieve this?

Thanks
George

Hello George,
Try granting at the Global Group level, "SeeQueue" right to Company
Employees, or maybe straight to Privileged group - it may save
work for
next queues...
HTH,
Gabriele Franzini
ICT Applications Manager
Nerviano Medical Sciences SRL
PO Box 11 - Viale Pasteur 10
20014 Nerviano Italy


------------------------------

Message: 6
Date: Mon, 23 Feb 2009 12:36:41 +0200
From: George Beitis <george.beitis@googlemail.com
<mailto:george.beitis@googlemail.com>>
Subject: [rt-users] Help with permissions?
To: rt-users <rt-users@lists.bestpractical.com
<mailto:rt-users@lists.bestpractical.com>>
Message-ID:
     
 <9be19c1c0902230236s461d290ag33ec0d09fbef7857@mail.gmail.com
<mailto:9be19c1c0902230236s461d290ag33ec0d09fbef7857@mail.gmail.com>>
Content-Type: text/plain; charset="iso-8859-1"

Hey everyone,
my problem has to do with setting permissions.

I have created a queue called IT support, and a group called Company
Employees.  The Employee group has the following rights on the group:
create
ticket and show ticket.  These don't seem to be enough for a user
in the
group employees to create a ticket as the queue name doesn't come
up in
the
create queue section of the screen or the quick create widget.  Am I
doing
something wrong there?

George
-------------- next part --------------
_______________________________________________
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com
<mailto:sales@bestpractical.com>


Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email




http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

Calvin Chiang
Network Admin
Utilyx
1st Floor, 55 North Wharf Road
Paddington
London, W2 1LA
Tel: 020 7087 8673
www.utilyx.com

“Utilyx” is the trading name of “Utilyx Limited” and “Utilyx Risk Management Limited” (URML). URML is authorised and regulated by the Financial Services Authority (FSA). This message contains information that may be privileged or confidential and is the property of Utilyx. It is intended only for the person to whom it is addressed. No confidentiality or privilege is waived or lost by any mistransmission. Any views or opinions expressed in this message are solely those of the author and do not necessarily represent those of Utilyx. Unless otherwise stated, any pricing information given in this message is indicative only and does not constitute an offer to deal at any price quoted. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email

Hey everyone,
my problem has to do with setting permissions.

I have created a queue called IT support, and a group called Company
Employees. The Employee group has the following rights on the group:
create
ticket and show ticket. These don’t seem to be enough for a user in the
group employees to create a ticket as the queue name doesn’t come up in
the
create queue section of the screen or the quick create widget. Am I
doing
something wrong there?

George

I think you may also need to grant SeeQueue on the queue to the group.

Steve

Stephen Turner
Senior Programmer/Analyst - SAIS
MIT IS&T

If i did that, wouldn’t that allow the user to view all the tickets in a
queue?On Mon, Feb 23, 2009 at 5:16 PM, Stephen Turner sturner@mit.edu wrote:

On Mon, 23 Feb 2009 05:36:41 -0500, George Beitis < george.beitis@googlemail.com> wrote:

Hey everyone,

my problem has to do with setting permissions.

I have created a queue called IT support, and a group called Company
Employees. The Employee group has the following rights on the group:
create
ticket and show ticket. These don’t seem to be enough for a user in the
group employees to create a ticket as the queue name doesn’t come up in
the
create queue section of the screen or the quick create widget. Am I doing
something wrong there?

George

I think you may also need to grant SeeQueue on the queue to the group.

Steve


Stephen Turner
Senior Programmer/Analyst - SAIS
MIT IS&T

If i did that, wouldn’t that allow the user to view all the tickets in a
queue?

I think you may also need to grant SeeQueue on the queue to the group.

Steve

No, it just allows them to see the queue. ShowTicket would allow them to
see all tickets.

Steve

Stephen Turner
Senior Programmer/Analyst - SAIS
MIT IS&T

That means that if a ticket they requested is not owned by them they
wouldn’t be able to see it right?On Tue, Feb 24, 2009 at 3:46 PM, Stephen Turner sturner@mit.edu wrote:

On Tue, 24 Feb 2009 01:54:38 -0500, George Beitis < george.beitis@googlemail.com> wrote:

If i did that, wouldn’t that allow the user to view all the tickets in a

queue?

On Mon, Feb 23, 2009 at 5:16 PM, Stephen Turner sturner@mit.edu wrote:

I think you may also need to grant SeeQueue on the queue to the group.

Steve

No, it just allows them to see the queue. ShowTicket would allow them to
see all tickets.

Steve


Stephen Turner
Senior Programmer/Analyst - SAIS
MIT IS&T

That means that if a ticket they requested is not owned by them they
wouldn’t be able to see it right?

That would depend on your other permissions - why not give it a try and
see what happens?

Good luck,
Steve

Stephen Turner
Senior Programmer/Analyst - SAIS
MIT IS&T

That means that if a ticket they requested is not owned by them they
wouldn’t be able to see it right?

That would depend on your other permissions - why not give it a try and
see what happens?

You may also be interested in this thread

http://www.mail-archive.com/rt-users@lists.bestpractical.com/msg18209.html

which allows perms to be applied before default views are constructed.
/chown -R us:us /yourbase